Loading...
Integration

Push company events to your systems in real time

Subscribe to monitoring alerts, list updates, and profile changes with signed payloads and replay support.

View plansTalk to sales
LivePanorama and Atlas

Webhooks & Events

Signed event delivery with retries and a delivery outbox.

Signed payloads with HMAC and timestamp headers

Outbox, retries, and per-endpoint delivery controls

Schema versioning for safe upgrades

How it works

What happens behind the scenes once you enable the integration.

  1. 1Create a webhook endpoint with a URL and event filters.
  2. 2Events enter the outbox and are delivered asynchronously.
  3. 3Delivery retries use backoff until max attempts.
  4. 4Failed deliveries can be replayed from the outbox.

Setup checklist

Steps your admin takes to get the integration live.

  • Workspace -> Integrations -> Webhooks.
  • Add endpoint URL and select events (or all events).
  • Copy the generated secret and verify signatures server-side.
  • Tune timeout/max attempts per endpoint.

Technical reference

Endpoints and sample requests to hand to your engineering team.

Endpoints

  • POST /api/v1/integrations/endpoints
  • GET /api/v1/integrations/outbox
  • POST /api/v1/integrations/endpoints/{id}/test

Sample request

curl -X POST "https://api.companies.indexbox.io/api/v1/integrations/endpoints" \
  -H "Content-Type: application/json" \
  -b "<workspace session>" \
  -d '{"kind":"webhook","name":"Monitoring","url":"https://example.com/webhook","events":["company.profile_updated"]}'

Sample payload

{
  "schema_version": "2025-01-01",
  "event_id": "evt_abc123",
  "event_type": "company.profile_updated",
  "tenant_id": "org_123",
  "created_at": "2026-01-08T10:00:00Z",
  "payload": {
    "company_id": "US-123456",
    "name": "IndexBox Inc."
  }
}

Notes

  • Signature headers include X-IndexBox-Signature and X-IndexBox-Timestamp.
  • Schema version is sent in X-IndexBox-Schema-Version header.
  • Replay resets attempt counters and re-queues delivery.

FAQ

Quick answers to common integration questions.

How do I verify webhook signatures?

Use the endpoint secret to compute the HMAC and compare it with the X-IndexBox-Signature header.

What happens if my endpoint is down?

Deliveries are retried with backoff until max attempts. Failed events remain in the outbox for replay.

Can I replay missed events?

Yes. Use the outbox UI or replay endpoint to re-queue failed deliveries.

Security & compliance

Controls that keep data safe and auditable.

  • HMAC signatures prevent spoofed events.
  • Outbound allowlist blocks unsafe destinations.
  • Endpoint secrets can be rotated without downtime.
Back to all integrations